Remove view mail option

Hi,

I am using Release 6.0.1_GA_1816.RHEL4_20090911162108 CentOS4 FOSS edition and I want no administrators have the option of view mail. Please help me how to remove this option. I feel the option of delegated administration being left out from FOSS edition is very sad.

zmprov help account help on account-related commands
zmprov help calendar help on calendar resource-related commands
zmprov help commands help on all commands
zmprov help config help on config-related commands
zmprov help cos help on COS-related commands
zmprov help domain help on domain-related commands
zmprov help freebusy help on free/busy-related commands
zmprov help list help on distribution list-related commands
zmprov help log help on logging commands
zmprov help misc help on misc commands
zmprov help mailbox help on mailbox-related commands
zmprov help notebook help on notebook-related commands
zmprov help right help on right-related commands
zmprov help search help on search-related commands
zmprov help server help on server-related commands
zmprov help share help on share related commands

After looking at this for a few minutes, I'm pretty sure that what you want to do is add a negative right for adminLoginAs to forbid it, rather than passively not allow it.

I couldn't apply the deny directly to a global administrator:

Code:

ERROR: service.INVALID_REQUEST (invalid request: grantee must be a delegated admin account or admin group, it cannot be a global admin account.)

Denying access to global administrators seems to be a bit tricky. I was able to get a deny right in by creating a distro list with only a test account that was a global admin and setting the list as an admin group. Then I did:

Code:

zmprov grr dl testing@domain.com grp testing@domain.com -adminLoginAs

However, my test user still had the view mail button and could still login..